Background: Security is incorporated late in the Software Development Life Cycle (SDLC), whereas early activities supporting developers in understanding and implementing security measures are difficult to integrate.

Aims: The project focuses on empowering developers with tools and practices to seamlessly integrate security and understand the role automation plays in it.

Method: During the project, we perform several industrial empirical studies, qualitative and quantitative, under the Design Science Research paradigm.

Results: Our studies supporting developers to secure their software supply chain show a positive stance despite low adoption of artifacts such as SBOM and VEX. Other efforts, embedding security in GUIbased testing, are showing promising results.

Conclusion: The project covers a broad spectrum of development activities that can be enhanced from a security perspective. Initial results show that despite developers' interest, adoption is limited.